This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json) Hash identifier: 1FBJRRKb/vlYY6S+oWEedUeetSL3RluxK+clsAb6g28= Subject key identifier: CA:41:A5:C8:E4:CD:3F:81:85:24:A4:C4:96:D0:83:BD:26:9E:A6:E0 Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc Certificate serial: 019B405ACD763B8C4BFEF40DE98ECF16FCE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 10:00:51 +0000 Manifest this update: Sun 21 Dec 2025 10:00:51 +0000 Manifest next update: Mon 22 Dec 2025 10:00:51 +0000 Files and hashes: 1: IsTCtVmTNyn-RD8cnFqGYXSoe0E.roa (hash: L2WChiXDdgP/OiZ7K6XF82266pxnvmteFE2BApkpXrw=) 2: nLB2qYSBJ1YFwwH2Uq3CWH-Xycw.roa (hash: DDaDM0x5+8q+LGF59JGSBz5quMqPXuHhZb7HpNUm6U8=) 3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: QPNfZm6f2mqpj64SGRugCekKPyogX1faFqpvXkt1I30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:cd:76:3b:8c:4b:fe:f4:0d:e9:8e:cf:16:fc:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc Validity Not Before: Dec 21 10:00:51 2025 GMT Not After : Dec 22 10:00:51 2025 GMT Subject: CN=ca41a5c8e4cd3f818524a4c496d083bd269ea6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:b5:d5:89:e2:35:a4:f3:1f:20:38:12:d4: 7d:27:e1:1b:3c:56:24:e5:1f:cf:38:a2:55:d6:06: 6a:f9:ec:7d:52:af:38:bb:a6:d6:35:29:82:55:b8: 39:75:9d:15:63:9c:56:e3:c3:65:74:0f:10:e0:c9: 40:e3:c5:a3:78:42:6c:84:d5:84:6a:b4:01:09:c4: 2e:23:a6:48:21:69:16:24:a8:85:26:ab:1b:b8:5d: ca:c2:75:7b:2a:b4:68:56:67:88:b5:a2:8b:29:0a: 17:f1:4c:45:85:55:fb:de:fb:b2:e6:f3:03:29:0a: 77:91:fa:d1:22:98:ea:d3:8c:68:3e:40:99:e0:80: 2a:a6:42:88:9f:6b:b0:42:09:b0:92:6e:f6:36:1d: 5f:9c:ea:5a:bd:55:32:57:c9:41:e4:6c:a7:ee:77: 91:72:33:f7:0a:61:2c:70:3a:73:5e:08:16:c3:da: 40:2d:ce:55:53:cb:5c:10:26:00:5c:79:a0:4d:24: 35:5e:d9:36:08:31:b4:d5:7e:d0:39:a8:bb:0c:32: 9b:e7:ff:1f:92:31:de:74:a3:07:fa:6f:17:49:f1: d3:90:ab:8b:eb:58:64:47:a6:d8:4e:96:e6:a7:f0: 02:1d:29:46:c3:3b:4d:f3:7b:67:b5:69:54:e9:b7: e5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:41:A5:C8:E4:CD:3F:81:85:24:A4:C4:96:D0:83:BD:26:9E:A6:E0 X509v3 Authority Key Identifier: keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:4d:0a:7d:01:ad:79:db:56:0e:bc:5b:54:48:29:ea:10:4c: 70:ef:82:70:59:51:bb:55:d0:96:9d:10:a8:55:6e:81:c4:76: 80:ac:9e:fb:58:4a:51:92:28:e9:d7:5d:68:85:3d:e8:a2:af: 2e:db:62:f0:bf:68:db:2e:98:43:e8:87:92:5f:52:35:56:95: 31:11:9a:82:a2:85:cc:b4:71:d1:ba:9a:9f:02:79:e4:45:79: 01:eb:98:19:0f:c3:f7:d2:4a:60:a0:15:31:bd:a2:09:03:a8: 67:06:38:1b:cd:18:74:3a:65:ad:a1:a7:6d:21:fd:4e:fe:93: 23:ff:ef:a4:8c:24:b2:be:d0:aa:d4:73:69:5b:ac:a4:d5:e6: c6:dc:2d:f7:b5:fa:a1:a2:eb:13:37:fe:e9:40:c3:2d:da:3d: 0e:96:75:05:11:d2:b0:3d:c5:91:07:3b:f1:91:52:3f:80:c4: 79:a2:c6:f3:15:07:f3:f0:c9:9b:d6:66:83:bb:ad:37:28:cb: 9e:f6:6e:10:58:c6:78:de:ee:ed:62:f6:c1:d3:9d:4e:e5:9e: 80:fd:18:3e:ed:71:b4:4e:bf:72:f5:1a:9d:95:8b:80:8d:f9: 73:f8:7d:ca:00:8e:c9:12:9d:dd:69:56:36:c2:24:d0:d3:64: 78:fa:7d:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWs12O4xL/vQN6Y7PFvzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MWQ0ZTk3ODgxMGU5Nzg5YTc2ZTY4N2E3ZGRkOTc1MjZi MGQ5YmMwHhcNMjUxMjIxMTAwMDUxWhcNMjUxMjIyMTAwMDUxWjAzMTEwLwYDVQQD EyhjYTQxYTVjOGU0Y2QzZjgxODUyNGE0YzQ5NmQwODNiZDI2OWVhNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusq11YniNaTzHyA4EtR9J+EbPFYk 5R/POKJV1gZq+ex9Uq84u6bWNSmCVbg5dZ0VY5xW48NldA8Q4MlA48WjeEJshNWE arQBCcQuI6ZIIWkWJKiFJqsbuF3KwnV7KrRoVmeItaKLKQoX8UxFhVX73vuy5vMD KQp3kfrRIpjq04xoPkCZ4IAqpkKIn2uwQgmwkm72Nh1fnOpavVUyV8lB5Gyn7neR cjP3CmEscDpzXggWw9pALc5VU8tcECYAXHmgTSQ1Xtk2CDG01X7QOai7DDKb5/8f kjHedKMH+m8XSfHTkKuL61hkR6bYTpbmp/ACHSlGwztN83tntWlU6bflTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpBpcjkzT+BhSSkxJbQg70mnqbgMB8GA1UdIwQY MBaAFKQdTpeIEOl4mnbmh6fd2XUmsNm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xNTg0NTAtZGQ0My00YjgyLWFiMmIt MDk1ZTcxODhkMGEwLzEvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8xNTg0NTAtZGQ0My00YjgyLWFiMmItMDk1ZTcxODhkMGEw LzEvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJk0KfQGt edtWDrxbVEgp6hBMcO+CcFlRu1XQlp0QqFVugcR2gKye+1hKUZIo6dddaIU96KKv Ltti8L9o2y6YQ+iHkl9SNVaVMRGagqKFzLRx0bqanwJ55EV5AeuYGQ/D99JKYKAV Mb2iCQOoZwY4G80YdDplraGnbSH9Tv6TI//vpIwksr7QqtRzaVuspNXmxtwt97X6 oaLrEzf+6UDDLdo9DpZ1BRHSsD3FkQc78ZFSP4DEeaLG8xUH8/DJm9Zmg7utNyjL nvZuEFjGeN7u7WL2wdOdTuWegP0YPu1xtE6/cvUanZWLgI35c/h9ygCOyRKd3WlW NsIk0NNkePp9wg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:28 2025 by rpki-client